index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("276adc6a55f13a229a5ff482e49f3a0b","63cbfc2c626da269c67506636bb1ea30","7f134c477f307652bb884cafe98b0bf2","3a3be84df2435623132efd1cd9467b17","03a59780b4c5a3c990d0031c959bf7cc","5b37be51ee3d41c07d02795a853b8577","15f6a606ab74b66e1f7e4a01b4a6b2d7")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("276adc6a55f13a229a5ff482e49f3a0b","63cbfc2c626da269c67506636bb1ea30","7f134c477f307652bb884cafe98b0bf2","3a3be84df2435623132efd1cd9467b17","03a59780b4c5a3c990d0031c959bf7cc","5b37be51ee3d41c07d02795a853b8577","15f6a606ab74b66e1f7e4a01b4a6b2d7")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("276adc6a55f13a229a5ff482e49f3a0b","63cbfc2c626da269c67506636bb1ea30","7f134c477f307652bb884cafe98b0bf2","3a3be84df2435623132efd1cd9467b17","03a59780b4c5a3c990d0031c959bf7cc","5b37be51ee3d41c07d02795a853b8577","15f6a606ab74b66e1f7e4a01b4a6b2d7")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("276adc6a55f13a229a5ff482e49f3a0b","63cbfc2c626da269c67506636bb1ea30","7f134c477f307652bb884cafe98b0bf2","3a3be84df2435623132efd1cd9467b17","03a59780b4c5a3c990d0031c959bf7cc","5b37be51ee3d41c07d02795a853b8577","15f6a606ab74b66e1f7e4a01b4a6b2d7")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("276adc6a55f13a229a5ff482e49f3a0b","63cbfc2c626da269c67506636bb1ea30","7f134c477f307652bb884cafe98b0bf2","3a3be84df2435623132efd1cd9467b17","03a59780b4c5a3c990d0031c959bf7cc","5b37be51ee3d41c07d02795a853b8577","15f6a606ab74b66e1f7e4a01b4a6b2d7")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("276adc6a55f13a229a5ff482e49f3a0b","63cbfc2c626da269c67506636bb1ea30","7f134c477f307652bb884cafe98b0bf2","3a3be84df2435623132efd1cd9467b17","03a59780b4c5a3c990d0031c959bf7cc","5b37be51ee3d41c07d02795a853b8577","15f6a606ab74b66e1f7e4a01b4a6b2d7")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("276adc6a55f13a229a5ff482e49f3a0b","63cbfc2c626da269c67506636bb1ea30","7f134c477f307652bb884cafe98b0bf2","3a3be84df2435623132efd1cd9467b17","03a59780b4c5a3c990d0031c959bf7cc","5b37be51ee3d41c07d02795a853b8577","15f6a606ab74b66e1f7e4a01b4a6b2d7")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("276adc6a55f13a229a5ff482e49f3a0b","63cbfc2c626da269c67506636bb1ea30","7f134c477f307652bb884cafe98b0bf2","3a3be84df2435623132efd1cd9467b17","03a59780b4c5a3c990d0031c959bf7cc","5b37be51ee3d41c07d02795a853b8577","15f6a606ab74b66e1f7e4a01b4a6b2d7")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("276adc6a55f13a229a5ff482e49f3a0b","63cbfc2c626da269c67506636bb1ea30","7f134c477f307652bb884cafe98b0bf2","3a3be84df2435623132efd1cd9467b17","03a59780b4c5a3c990d0031c959bf7cc","5b37be51ee3d41c07d02795a853b8577","15f6a606ab74b66e1f7e4a01b4a6b2d7")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("276adc6a55f13a229a5ff482e49f3a0b","63cbfc2c626da269c67506636bb1ea30","7f134c477f307652bb884cafe98b0bf2","3a3be84df2435623132efd1cd9467b17","03a59780b4c5a3c990d0031c959bf7cc","5b37be51ee3d41c07d02795a853b8577","15f6a606ab74b66e1f7e4a01b4a6b2d7")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("276adc6a55f13a229a5ff482e49f3a0b","63cbfc2c626da269c67506636bb1ea30","7f134c477f307652bb884cafe98b0bf2","3a3be84df2435623132efd1cd9467b17","03a59780b4c5a3c990d0031c959bf7cc","5b37be51ee3d41c07d02795a853b8577","15f6a606ab74b66e1f7e4a01b4a6b2d7")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("276adc6a55f13a229a5ff482e49f3a0b","63cbfc2c626da269c67506636bb1ea30","7f134c477f307652bb884cafe98b0bf2","3a3be84df2435623132efd1cd9467b17","03a59780b4c5a3c990d0031c959bf7cc","5b37be51ee3d41c07d02795a853b8577","15f6a606ab74b66e1f7e4a01b4a6b2d7")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("276adc6a55f13a229a5ff482e49f3a0b","63cbfc2c626da269c67506636bb1ea30","7f134c477f307652bb884cafe98b0bf2","3a3be84df2435623132efd1cd9467b17","03a59780b4c5a3c990d0031c959bf7cc","5b37be51ee3d41c07d02795a853b8577","15f6a606ab74b66e1f7e4a01b4a6b2d7")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("276adc6a55f13a229a5ff482e49f3a0b","63cbfc2c626da269c67506636bb1ea30","7f134c477f307652bb884cafe98b0bf2","3a3be84df2435623132efd1cd9467b17","03a59780b4c5a3c990d0031c959bf7cc","5b37be51ee3d41c07d02795a853b8577","15f6a606ab74b66e1f7e4a01b4a6b2d7")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("276adc6a55f13a229a5ff482e49f3a0b","63cbfc2c626da269c67506636bb1ea30","7f134c477f307652bb884cafe98b0bf2","3a3be84df2435623132efd1cd9467b17","03a59780b4c5a3c990d0031c959bf7cc","5b37be51ee3d41c07d02795a853b8577","15f6a606ab74b66e1f7e4a01b4a6b2d7")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("276adc6a55f13a229a5ff482e49f3a0b","63cbfc2c626da269c67506636bb1ea30","7f134c477f307652bb884cafe98b0bf2","3a3be84df2435623132efd1cd9467b17","03a59780b4c5a3c990d0031c959bf7cc","5b37be51ee3d41c07d02795a853b8577","15f6a606ab74b66e1f7e4a01b4a6b2d7")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("276adc6a55f13a229a5ff482e49f3a0b","63cbfc2c626da269c67506636bb1ea30","7f134c477f307652bb884cafe98b0bf2","3a3be84df2435623132efd1cd9467b17","03a59780b4c5a3c990d0031c959bf7cc","5b37be51ee3d41c07d02795a853b8577","15f6a606ab74b66e1f7e4a01b4a6b2d7")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("276adc6a55f13a229a5ff482e49f3a0b","63cbfc2c626da269c67506636bb1ea30","7f134c477f307652bb884cafe98b0bf2","3a3be84df2435623132efd1cd9467b17","03a59780b4c5a3c990d0031c959bf7cc","5b37be51ee3d41c07d02795a853b8577","15f6a606ab74b66e1f7e4a01b4a6b2d7")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("276adc6a55f13a229a5ff482e49f3a0b","63cbfc2c626da269c67506636bb1ea30","7f134c477f307652bb884cafe98b0bf2","3a3be84df2435623132efd1cd9467b17","03a59780b4c5a3c990d0031c959bf7cc","5b37be51ee3d41c07d02795a853b8577","15f6a606ab74b66e1f7e4a01b4a6b2d7")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("276adc6a55f13a229a5ff482e49f3a0b","63cbfc2c626da269c67506636bb1ea30","7f134c477f307652bb884cafe98b0bf2","3a3be84df2435623132efd1cd9467b17","03a59780b4c5a3c990d0031c959bf7cc","5b37be51ee3d41c07d02795a853b8577","15f6a606ab74b66e1f7e4a01b4a6b2d7")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("276adc6a55f13a229a5ff482e49f3a0b","63cbfc2c626da269c67506636bb1ea30","7f134c477f307652bb884cafe98b0bf2","3a3be84df2435623132efd1cd9467b17","03a59780b4c5a3c990d0031c959bf7cc","5b37be51ee3d41c07d02795a853b8577","15f6a606ab74b66e1f7e4a01b4a6b2d7")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("276adc6a55f13a229a5ff482e49f3a0b","63cbfc2c626da269c67506636bb1ea30","7f134c477f307652bb884cafe98b0bf2","3a3be84df2435623132efd1cd9467b17","03a59780b4c5a3c990d0031c959bf7cc","5b37be51ee3d41c07d02795a853b8577","15f6a606ab74b66e1f7e4a01b4a6b2d7")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("276adc6a55f13a229a5ff482e49f3a0b","63cbfc2c626da269c67506636bb1ea30","7f134c477f307652bb884cafe98b0bf2","3a3be84df2435623132efd1cd9467b17","03a59780b4c5a3c990d0031c959bf7cc","5b37be51ee3d41c07d02795a853b8577","15f6a606ab74b66e1f7e4a01b4a6b2d7")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("276adc6a55f13a229a5ff482e49f3a0b","63cbfc2c626da269c67506636bb1ea30","7f134c477f307652bb884cafe98b0bf2","3a3be84df2435623132efd1cd9467b17","03a59780b4c5a3c990d0031c959bf7cc","5b37be51ee3d41c07d02795a853b8577","15f6a606ab74b66e1f7e4a01b4a6b2d7")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("276adc6a55f13a229a5ff482e49f3a0b","63cbfc2c626da269c67506636bb1ea30","7f134c477f307652bb884cafe98b0bf2","3a3be84df2435623132efd1cd9467b17","03a59780b4c5a3c990d0031c959bf7cc","5b37be51ee3d41c07d02795a853b8577","15f6a606ab74b66e1f7e4a01b4a6b2d7")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("276adc6a55f13a229a5ff482e49f3a0b","63cbfc2c626da269c67506636bb1ea30","7f134c477f307652bb884cafe98b0bf2","3a3be84df2435623132efd1cd9467b17","03a59780b4c5a3c990d0031c959bf7cc","5b37be51ee3d41c07d02795a853b8577","15f6a606ab74b66e1f7e4a01b4a6b2d7")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("276adc6a55f13a229a5ff482e49f3a0b","63cbfc2c626da269c67506636bb1ea30","7f134c477f307652bb884cafe98b0bf2","3a3be84df2435623132efd1cd9467b17","03a59780b4c5a3c990d0031c959bf7cc","5b37be51ee3d41c07d02795a853b8577","15f6a606ab74b66e1f7e4a01b4a6b2d7")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("276adc6a55f13a229a5ff482e49f3a0b","63cbfc2c626da269c67506636bb1ea30","7f134c477f307652bb884cafe98b0bf2","3a3be84df2435623132efd1cd9467b17","03a59780b4c5a3c990d0031c959bf7cc","5b37be51ee3d41c07d02795a853b8577","15f6a606ab74b66e1f7e4a01b4a6b2d7")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("276adc6a55f13a229a5ff482e49f3a0b","63cbfc2c626da269c67506636bb1ea30","7f134c477f307652bb884cafe98b0bf2","3a3be84df2435623132efd1cd9467b17","03a59780b4c5a3c990d0031c959bf7cc","5b37be51ee3d41c07d02795a853b8577","15f6a606ab74b66e1f7e4a01b4a6b2d7")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("276adc6a55f13a229a5ff482e49f3a0b","63cbfc2c626da269c67506636bb1ea30","7f134c477f307652bb884cafe98b0bf2","3a3be84df2435623132efd1cd9467b17","03a59780b4c5a3c990d0031c959bf7cc","5b37be51ee3d41c07d02795a853b8577","15f6a606ab74b66e1f7e4a01b4a6b2d7")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("276adc6a55f13a229a5ff482e49f3a0b","63cbfc2c626da269c67506636bb1ea30","7f134c477f307652bb884cafe98b0bf2","3a3be84df2435623132efd1cd9467b17","03a59780b4c5a3c990d0031c959bf7cc","5b37be51ee3d41c07d02795a853b8577","15f6a606ab74b66e1f7e4a01b4a6b2d7")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("276adc6a55f13a229a5ff482e49f3a0b","63cbfc2c626da269c67506636bb1ea30","7f134c477f307652bb884cafe98b0bf2","3a3be84df2435623132efd1cd9467b17","03a59780b4c5a3c990d0031c959bf7cc","5b37be51ee3d41c07d02795a853b8577","15f6a606ab74b66e1f7e4a01b4a6b2d7")
